HNHacker News
TopNewBestAskShowJobs

professorTuring

335 karma · joined February 13, 2013

Cybersecurity
submissionscomments
professorTuring··on Blockchain technology is on a collision course with EU privacy law
Definitely it was a good read, but let me just focus on the main point.

It is true that Blockchain technology has been thought as a replacement of a trusted third party like a notary or central register, but usually those are public registries: household ownerships, public offers... And those registries are usually exceptions or are treated in a different way (and usually they are explicitly regulated by each country). A few of them are even public, like the defaulters list in Spain.

Also, it is quite naive to think that an European citizen can erase "any personal data", that could be quite convenient to erase your fresh new mortgage or obligations. You are only allowed to ask for irrelevant information to be removed not for specific business related log even if they have your personal data in them.

professorTuring··on "Pwned Passwords" V2 With Half a Billion Passwords
Agree.
professorTuring··on "Pwned Passwords" V2 With Half a Billion Passwords
Meh... I won't bother. Discuss your solution with a security guy you trust.
professorTuring··on "Pwned Passwords" V2 With Half a Billion Passwords
Rule n1: don't roll your own security. Rule n2: goto 1

You are overcomplicating your authentication system by oversimplifying security problems and the result is that you have solved nothing.

Security always seems very easy to solve and usually non-security engineers tends towards solutions like yours that doesn't provide extra security, they just add a few extra steps for a hacker to obtain you database and as a result you need to maintain extra databases, there are more error points... Do you remember that thing about "each extra system exponentiates complexity"?

professorTuring··on A computer science study plan
Completely agree. This is "how to become a programmer with a general knowledge". Far, far away from a Computer Scientist.

I can't see any of the "basics" stuff like calculus, algebra...

BUT, it is truth that most of the enterprises are fine having a programmer rather than a Computer Scientist... Probably most of them can't even tell the difference.

professorTuring··on Users don’t need a password
The only problem of passwords is that the they are unsafe and mostly broken.

Having said that, it is the easiest tool to "identify" a regular Joe in a regular web.

All non-regular-more-secure webs should use 2FA.

professorTuring··on Ask HN: Who is hiring? (August 2017)
I'm still waiting for you to open some security/tech risk positions =)
professorTuring··on Say Goodbye to Spain's Three-Hour Lunch Break
Yes, but they don't take 3 hours to have lunch. Also closed to the public doesn't mean not working (back-office!).
professorTuring··on Say Goodbye to Spain's Three-Hour Lunch Break
I believe that more "artisan" work or traditional professions does not have an schedule. Also, if you work for yourself you don't have a schedule neither.

A carpenter, for example, will work in projects and probably doesn't have an specific schedule (I believe this applies globally).

A policeman or a nurse will work in work shifts...

But this I can tell you, practically nobody will have a three hours stop in their typical work day.

In the retail industry it's a bit different and you can find small shops owners that usually close from 14:00 to 17:00) and people working in big companies like "Ikea" or "MediaMarkt" that are being forced to have strange daily workshifts with 4 hours working in the morning and another 4 hours in the afternoon... But they are usually young people that hate that and usually goes to the gym with that extra time...

professorTuring··on Say Goodbye to Spain's Three-Hour Lunch Break
I'm from Spain and this article does not represent Spain. Let me expand on this.

The typical workday in Spain (no matter if you are a worker or in an office) goes from 7:00/9:00 to 15:00/18:00. This is usually a 8 hours work day (a lot of unpaid extra hours are quite typical in any IT job).

Usually there are two stops before lucnh, one at the beginning of the day, usually 15 minutes to have a coffee with coworkers and another one of 15-20 minutes at midday (11:00/12:00) to have a piece of fruit or just another coffee.

At lunch there are two options, the ones that leave job at 15:00 usually eat at 15:30 - 16:00 (quite late but quite common), the rest takes an hour to have lunch (usually two dishes and dessert [a bit too much I admit]) and they are allowed to leave normally when they make 8 hours at work.

There are a lot of flexibility if you are not public facing so you can play a bit with the arriving/living time (usually you are allowed to arrive up to 10:00 in the morning).

Only people who lives really close to home (up to 10/15 minutes) goes there to have lunch with their family and they usually also take a power nap of 15 minutes more or less.

Spanish siesta is for Fridays and holidays.

professorTuring··on Scott's Cheap Flights: Growing a small side project into a booming business
Is it mandatory to fill my CC details in order to subscribe with the promotion? (I don't really enjoy doing that...)
professorTuring··on Scott's Cheap Flights: Growing a small side project into a booming business
Ok, didn't see it! =)
professorTuring··on Scott's Cheap Flights: Growing a small side project into a booming business
I'm an SCF premium, will you give me a premium 3 Month coupon in order to compare the services and maybe switch my subscription to your app?
professorTuring··on Source Code Poetry 2015
What about the ioccc (International Obfuscated C Code Contest)?

http://www.ioccc.org/

professorTuring··on Hackers Can Steal Gmail Credentials from Samsung Smart Fridges
The new definition of IoT: Insecurity of Things.
professorTuring··on [dead]
This is the correct answer.
professorTuring··on 15 Little-Known Unix Commands
I read "little known" and I thought: "cool, I love to learn new commands =)". Unfortunately most of them are "well known" unix commands (unless you are a newbie).
professorTuring··on Ask HN: Choosing paths, what will you do?
These have some good points =)
professorTuring··on Ask HN: Choosing paths, what will you do?
Thank you for your insight =)
professorTuring··on [dead]
Impressive.
professorTuring··on [dead]
Well, the problem here is that maybe you simply didn't notice. I have never noticed anyone buying goods for another people but I have seen a lot of people buying together, how can I be sure one of them were being helped by the other one?

When we are at a supermarket we don't usually notice anything beside our own grocery list...

professorTuring··on [dead]
I don't really care what you think. Also, like most of the people that help, I do that to help people, not to brag about helping.
professorTuring··on [dead]
Yeps, the repetition over this is what led me not to give money but instead helping them in this other way.

Also, trust your instincts.

professorTuring··on Ask HN: Do you use Web Application Firewall (WAF)?
As a security expert I wouldn't recommend this approach. The "as many layers as possible" is a waste of time and money (an overkill).

A proper threat and risk analysis should be done so you can have a cost-effective solution. Security is expensive and maybe the cost of a breach is way cheaper than the security appliance or experts you hire.

Sometimes the best security solution is not to have anything, because it doesn't really matter.

professorTuring··on [dead]
I stopped giving money to "beggars" long ago. I usually help them by buying them what they need.

I go with them to whichever close market or restaurant and buy them what they really need, I don't usually put a money limit but rarely goes over 20 bucks with a nice food basket.

Part of these process is also listening to their stories, sometimes you can even hire them for some tasks and I usually tell them to help others in the same way if they have the oportunity (or to teach their children this lesson).

Of course they could sell these items later but I really feel good about this and I don't think they do that.

professorTuring··on How FIFA's Goal Line Technology Works
Unfortunately this article doesn't dig enough... It doesn't even mention where the cameras are placed, algorithms, technology...

It is just a reworded version of any article in any newspaper...

The wikipedia goes (just a bit) deeper, if anyone interested: http://en.wikipedia.org/wiki/Goal-line_technology

professorTuring··on Re-Ask HN: Engineer contractor rates in Spain, Catalonia (Barcelona)?
Sorry, you are so right, I meant IRPF in my third point and I was referring to the 21% (around 1000€ with the salary I proposed).

About the VAT, well, I usually price VAT included... I just wanted to point out the VAT issue, the "cuota" and the IRPF, I believe it is clear now =)

Thanks for your corrections.

professorTuring··on Re-Ask HN: Engineer contractor rates in Spain, Catalonia (Barcelona)?
I am from Spain, when charging you should take into consideration various aspects:

1. 21% of your fee goes behind taxes.

2. If you want to work on your own you have to pay each month around 250€

3. If you are going to live there, you should also consider paying the social security fees (around 1000€/month more).

More input: A house keeper charges between 10/12€/hour,

A particular teacher charges between 15€/hour.

A computer forensic expert charges around 100-150€/hour.

Mechanics charge between 30-50€/hour.

I would recommend between 75-150€/hour depending on the amount of hours. If you are going to stay in their office and work with them around 8h/month I would charge between 5-7k/month. 1k/week should be fine.

professorTuring··on Ask HN: Is Objective-C Now Dead?

  "No. Languages take a while to die. C is still around."
That is unfortunate. You can't compare a language supported by mostly one company as Objective-C against one of the most important languages around.

C is widely used and a not dead, not even wounded language. Thousand of companies use it every day in core systems, embedded systems...

I am really wondering why you have suggested C being dead or on his way to die...

professorTuring··on Ask HN: Freelancer? Seeking freelancer? (June 2014)
SEEKING WORK - REMOTE - InfoSec

I would like to help your enterprise with your security concerns in the development life cycle (SDLC security). I can also work with you in different security areas, I just believe this should be the more attractive to people around here.

We will walk together and I will enable you to achieve your goals in a secure way. Just smart security for your business.

I am seeking for my first remote work so I will give the first an special rate.

Contact me here or at my e-mail professorTuring-at-gmail...

← PreviousPage 3 of 6Next →